Privacy Policy

This policy applies to all visitors and users of the Site, regardless of location. It covers personal information collected through:

• Our Contact Us form
• Automatic server-side logging when you browse the Site
• Cookies and similar technologies (see Section 6)

It does not apply to information collected offline or through channels other than the Site.

A. Information You Provide

We only collect the information you voluntarily submit through our Contact Us form. This may include:

• Full name (required)
• Email address (required)
• Phone number (optional)
• Product or service of interest (required)
• Message content (required)

We do not create user accounts, collect payment or financial information, or require you to register to browse the Site.

B. Information Collected Automatically

When you visit the Site, our web server and hosting infrastructure automatically record certain technical information, including:

• IP address
• Browser type and version
• Operating system
• Referring URL (the page that linked you to our Site)
• Pages visited and time spent on each page
• Date and time of your request
• HTTP status codes and response sizes

This information is collected in standard server access logs. It is used exclusively for security monitoring, diagnosing technical issues, and understanding aggregate traffic patterns. It is not used to build individual behavioral profiles or linked to any personally identifiable information unless required to investigate a security incident.

C. Information We Do Not Collect

We do not collect:

• Payment card or financial account information
• Government-issued identification numbers
• Biometric data
• Precise geolocation data
• Information from social media profiles

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal information under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Legitimate interests— to respond to your inquiry, maintain the security and proper operation of the Site, and keep records of communications for our legitimate business purposes.
• Consent— for non-essential cookies, which you may withdraw at any time via our cookie preference banner.
• Legal obligation— where we are required to retain or disclose information by applicable law.

If you are not in one of the regions listed above, applicable local law governs our processing. See Section 17 (Governing Law) for details.

Information collected through the Contact Us form is used solely to:

• Respond to your product and service inquiries
• Provide relevant information about LifestyleMI offerings
• Follow up on prior communications at your request
• Maintain internal records of customer interactions
• Comply with applicable legal obligations

Automatically collected technical data (server logs) is used to:

• Monitor and maintain Site security and performance
• Diagnose technical errors
• Understand aggregate, anonymous traffic patterns

We will not use your information for automated decision-making or profiling that produces legal or similarly significant effects.

We do not sell, rent, trade, or otherwise transfer your personal information to third parties for their own marketing or advertising purposes — ever.

We may share your information only in the following limited circumstances:

• Service providers— trusted vendors who assist us in operating the Site (e.g., web hosting, email delivery). These providers are contractually prohibited from using your data for any purpose other than performing services on our behalf.
• Legal requirements— when we believe disclosure is required by law, court order, or governmental authority, or to protect the rights, property, or safety of LifestyleMI, our users, or the public.
• Business transfers— in connection with a merger, acquisition, or sale of all or substantially all of our assets, in which case the successor entity would be bound by the terms of this policy or required to obtain your consent if they intend to use your data in a materially different way.

Our Site does not set first-party HTTP cookies. We use browser local storage for one purpose only:

• Consent preference— a single local storage entry (cookie_consent) records whether you accepted or declined our cookie banner, so we do not prompt you again on every visit.

We do not use advertising cookies, behavioral tracking cookies, analytics cookies, or third-party retargeting technologies of any kind.

Google Fonts (used for typography) may set cookies on Google’s own domains when your browser fetches font files, but no such cookies are set on the lifestylemi.com domain. For a full inventory of what is stored on your device and how to manage it, please read our Cookie Policy.

Our Site integrates a limited number of third-party services. Each third party has its own privacy practices, which we encourage you to review:

• Google Fonts— our Site loads typefaces hosted by Google. When your browser requests a font file, Google may process your IP address. This is a functional service used solely for typography and does not involve advertising or behavioral tracking. See Google’s Privacy Policy for details.
• Web hosting provider— our hosting infrastructure processes the server log data described in Section 2(B). Hosting providers are bound by data processing agreements that restrict their use of this data.

We do not currently use third-party analytics platforms, advertising networks, or social media tracking pixels. If this changes, this policy will be updated before any such services are deployed.

Some browsers offer a “Do Not Track” (DNT) signal. Because there is no universally accepted standard for how websites should respond to DNT signals, our Site does not currently alter its data collection practices in response to DNT signals. Our data collection practices are described fully in this policy regardless of whether a DNT signal is detected.

We retain your personal information only as long as necessary for the purposes described in this policy:

• Contact form submissions— retained for up to 24 months from the date of submission to allow us to respond to your inquiry and maintain records of customer interactions. After this period, submissions are deleted or de-identified unless a longer retention period is required by law.
• Server access logs— retained for up to 90 days, after which they are automatically purged.
• Cookie consent records— retained for up to 13 months to honor your stated preferences.

You may request deletion of your contact form submission at any time (see Section 11).

We implement reasonable and appropriate technical and organizational safeguards to protect your personal information, including:

• TLS/HTTPS encryption for all data transmitted between your browser and the Site
• Access controls that restrict who within our organization can access contact form data
• Regular review of security practices

However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, and any transmission of personal information is at your own risk. We will notify affected individuals and relevant authorities of a data breach as required by applicable law.

Depending on your location, you may have the following rights regarding your personal information:

• Access— request a copy of the personal information we hold about you.
• Correction— request that we correct inaccurate or incomplete information.
• Deletion— request that we delete your personal information, subject to legal obligations that require us to retain it.
• Restriction— request that we restrict processing of your information in certain circumstances.
• Portability— request a structured, machine-readable copy of the information you provided to us.
• Objection— object to processing based on our legitimate interests.
• Withdraw consent— where processing is based on your consent (e.g., non-essential cookies), withdraw that consent at any time without affecting the lawfulness of prior processing.
• Lodge a complaint— if you are located in the EEA, UK, or Switzerland and believe we have processed your personal information in violation of applicable law, you have the right to lodge a complaint with your local Data Protection Authority (DPA). In the EU, you can find your national DPA at edpb.europa.eu/about-edpb/board/members. UK residents may contact the Information Commissioner’s Office (ICO) at ico.org.uk. We encourage you to contact us first so we can try to resolve your concern directly.

To exercise any of these rights, please contact us via our Contact Us page. We will respond within the timeframe required by applicable law (generally within 30–45 days). We may ask you to verify your identity before fulfilling a request. We will not discriminate against you for exercising any of these rights.

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you additional rights. Under those laws:

• We do not sell or share your personal information as those terms are defined by the CCPA/CPRA. You therefore do not need to opt out of a sale or sharing of your data.
• You have the right to know what categories of personal information we collect, use, disclose, and retain.
• You have the right to request deletion of your personal information, subject to certain exceptions.
• You have the right to correct inaccurate personal information.
• You have the right to limit our use of sensitive personal information (we do not collect sensitive personal information as defined by the CPRA).
• You have the right to non-discrimination for exercising your CCPA rights.

Categories of personal information we collect from California residents are described in Section 2. To submit a verifiable consumer request, use our Contact Us page and identify your request as a California privacy rights request. We will respond within 45 days as required by law.

The Site is intended for general audiences and is not directed to children. We do not knowingly collect personal information from:

• Children under 13 years of age (COPPA, United States)
• Children under 16 years of age (GDPR, European Economic Area)

If you believe a child has submitted personal information through the Site without appropriate parental or guardian consent, please contact us immediately and we will take steps to delete the information as promptly as possible. Parents or guardians wishing to review or delete information submitted by a child may contact us via our Contact Us page.

The Site may contain links to external websites or resources not operated by LifestyleMI. These links are provided for your convenience only. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policy of every site you visit.

The Site is operated in the United States. If you access the Site from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Site, you consent to the transfer of your information to the United States in accordance with this policy.

Where required by applicable law (e.g., GDPR), we rely on appropriate safeguards for such transfers, including standard contractual clauses or other lawful transfer mechanisms.

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or Site features. Material changes will be indicated by a new “Last Updated” date at the top of this page. For significant changes that affect how we use information you have already provided, we will make reasonable efforts to notify you (e.g., by posting a prominent notice on the Site).

Your continued use of the Site after any changes are posted constitutes your acceptance of the updated policy. We encourage you to review this page periodically. Prior versions of this policy are available upon request.

This Privacy Policy is governed by and construed in accordance with the laws of the State of Michigan and applicable federal law of the United States, without regard to conflict-of-law principles. Any dispute arising under this policy shall be subject to the exclusive jurisdiction of the state and federal courts located in Michigan.

If you have questions, concerns, or requests related to this Privacy Policy — including exercising any of your privacy rights — please contact us via our Contact Us page. Please include “Privacy Policy Request” in the subject or message so we can route your inquiry to the right person.

We take privacy inquiries seriously and will respond as promptly as possible, and in any case within the timeframe required by applicable law.